domain hijacking - once again? - GoFuckYourself.com

polish_aristocrat · 12-14-2002, 03:42 PM

What does it mean exactly that a domain is "locked"?
I know in theory it should prevent a name being hijacked
( although Boneprone wrote that actually it can be an abstacle in getting the name back... ).
In the WHOIS for some name I found:

Status: PROTECTED ( seems to be the same as "locked" )
Note: To help prevent malicious domain hijacking and domain
transfer errors, the registrar has protected the registrant
of this domain name registrant by locking it. Any attempted
transfers will be denied at the registry until the registrant
requests otherwise. The registrant for the name may unlock
the name at any time at the current registrar in order for
a transfer initiation to succeed

"the registrant may unlock the name at any time..." - so if someone hackes in in my registrar account, he can simply unlock the name and transfer it. So it seems like locking a domain prevents hijacking only if the hacker hacks in the email account he sees in the whois and not in the registrar account.

I hope someone will precize it, 'cause after reading the last posts about stolen domains, I can't stop thinking about it.

Probono · 12-14-2002, 03:59 PM

Res Ipsa Loquitor

12-14-2002, 03:42 PM	#1
polish_aristocrat Too lazy to set a custom title Join Date: Jul 2002 Posts: 40,377	domain hijacking - once again? What does it mean exactly that a domain is "locked"? I know in theory it should prevent a name being hijacked ( although Boneprone wrote that actually it can be an abstacle in getting the name back... ). In the WHOIS for some name I found: Status: PROTECTED ( seems to be the same as "locked" ) Note: To help prevent malicious domain hijacking and domain transfer errors, the registrar has protected the registrant of this domain name registrant by locking it. Any attempted transfers will be denied at the registry until the registrant requests otherwise. The registrant for the name may unlock the name at any time at the current registrar in order for a transfer initiation to succeed "the registrant may unlock the name at any time..." - so if someone hackes in in my registrar account, he can simply unlock the name and transfer it. So it seems like locking a domain prevents hijacking only if the hacker hacks in the email account he sees in the whois and not in the registrar account. I hope someone will precize it, 'cause after reading the last posts about stolen domains, I can't stop thinking about it. __________________ I don't use ICQ anymore.

12-14-2002, 03:59 PM	#2
Probono Confirmed User Join Date: Oct 2002 Location: Under the Rainbow Posts: 2,731	Res Ipsa Loquitor